c1f13ad12b159a7375a5a282160922b8860b2c71e50980aa58d335affb548b6d

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 19:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-09_7eb0540d6a7cb3e97da2717a81973704_elex_wannacry.exe
Size 1.2MB
Sample260809-ygeeksvcjd
SHA256 c1f13ad12b159a7375a5a282160922b8860b2c71e50980aa58d335affb548b6d
MD5 7eb0540d6a7cb3e97da2717a81973704
SHA1 0e9d763ca331babf4e51c130caf6eed51d42ea36
SHA512 77a4dadd893cccb952540ad1929fd5435928aefd89c3d9f29abee19138bbda98a00115b242f7390a3d76f02cb4f9b9e26152b44f257ed725ceb3b3bdd4e294de
SSDEEP 24576:S9C0XrUMFDsTB6vGPG2LW+P+mz8Or3hAvLhmKXMjdRp4FbJhd+AI:S9C0Xgfe2DhrsLhHXMx/8+3
TLSH
T176453339B10390B2E27616F20E395F40563E50F538B974A7E998CD693FBFEE2A031156
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-09_7eb0540d6a7cb3e97da2717a81973704_elex_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-09_7eb0540d6a7cb3e97da2717a81973704_elex_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-09_7eb0540d6a7cb3e97da2717a81973704_elex_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5092

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5092-0-0x0000000000400000-0x000000000042D000-memory.dmp

Download